skills.rest
arinbalyan
arinbalyanCOMMUNITY
Explore all skills by this author →
Website𝕏@arinbalyanGitHub

security-review

Audit codebases for security vulnerabilities and misconfigurations using static analysis tools.

Updated Aug 23, 2026
Search Tags:#static analysis#code review#secure coding#vulnerability assessment#threat modeling#security auditing#dependency checks
One-click install
npx skills add https://github.com/arinbalyan/config --skill security-review-arinbalyan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/arinbalyan/config/tree/main/skills/security-review
Command: npx skills add https://github.com/arinbalyan/config --skill security-review-arinbalyan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams identify and remediate vulnerabilities and misconfigurations across codebases, CI pipelines, and deployed apps, reducing risk and exposure.

Core Features & Use Cases

  • Automated security analysis: integrates static analysis tools for vulnerability scanning (Bandit, Semgrep, CodeQL).
  • Threat modeling & risk assessment: supports identifying attack surfaces and prioritizing fixes.
  • Remediation guidance: provides actionable steps for secure coding, dependency updates, and access controls. Use Case: For a typical web application with multiple services, run security-review to surface XSS, SQL injection, and misconfigurations, then create a remediation plan.

Quick Start

Run the security-review on your repository to begin automated vulnerability scanning and threat modeling.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform automated vulnerability discovery and static analysis on my codebase?▼

Static analysis tools like Bandit, Semgrep, and CodeQL scan codebases during code reviews or CI workflows to perform automated vulnerability discovery, identifying security flaws and misconfigurations before deployment.

Can I use static analysis to detect XSS and SQL injection vulnerabilities in web applications?▼

Static analysis detects XSS and SQL injection vulnerabilities in web applications by scanning source code for insecure patterns, enabling security teams to surface flaws and generate a remediation plan for multiple services.

What is the best way to integrate secure coding and dependency vulnerability checks into a CI pipeline?▼

Integrating secure coding and dependency vulnerability checks into a CI pipeline involves running automated security auditing tools during code reviews to assess risk and identify outdated or compromised dependencies.

Does threat modeling help with risk assessment and prioritizing fixes for identified attack surfaces?▼

Threat modeling supports risk assessment by identifying attack surfaces across codebases and deployed applications, allowing security teams to prioritize fixes and implement actionable secure coding steps.

Why do I need secure credential handling and access controls when running a security audit?▼

Secure credential handling and access controls are required during a security audit to prevent exposing sensitive data while scanning for vulnerabilities, ensuring threat modeling processes do not introduce new risks.

Related Skills

Explore More Software Engineering Skills→
XerrionXerrion

pentest-sast

Identify SAST, dependency, secret, and supply-chain risks across source code and history.

Community
Advanced
ZateZate
9

remediation-auth

Provide remediation patterns for authentication and authorization vulnerabilities.

Community
Advanced
h4vzzh4vzz
33

static-application-security-testing

Scan source code for security vulnerabilities and generate SARIF reports.

Community
Advanced
thepradipthepradip

security-audit

Identify vulnerabilities and generate remediation guidance for software applications.

Community
Advanced